Re: Cannot deny access to certain data folders

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 12/24/02


From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Mon, 23 Dec 2002 23:30:00 -0700

Pro or Home ?

In Pro shut off the Simplified sharing in View tab of Folder Options,
while in Home or Pro use cacls utility at a cmd prompt or an F8 safe
mode boot.

You must make sure that the user is not a member of any group
that is granted permissions, unless the user or a group of which
the user is a member is explicitly denied the permission.

--
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"GG" <gsimon@ameritech.net> wrote in message
news:#X1aQ8sqCHA.2260@TK2MSFTNGP10...
> I do not see the Security Tab. Only General, Sharing and Customize are
> visible when I right click on the folder and select Properties or Sharing
&
> Security
>
> Gary
>
>
> "Karl Levinson [x y] mvp" <levinson_k@excite.com> wrote in message
> news:eR7u0SpqCHA.2540@TK2MSFTNGP12...
> >
> > "GG" <gsimon@ameritech.net> wrote in message
> > news:eMsQiOoqCHA.2548@TK2MSFTNGP10...
> > > I've set NTFS permissions for user XXXX to deny everything to my photo
> > > model's folder. The user is not a member of a group that has Read
> > permission
> > > to that folder. Yet, when I log on as that user I can open and view
> files
> > in
> > > the folder.
> >
> > Deny everything to which user or group?  Were the appropriate checkboxes
> > selected to force the permissions to be inherited by files in the
folder?
> > [Inheritance of permissions from the parent folder might have been
> disabled
> > on individual files or subfolders, and might need to be reset using this
> > method.]
> >
> > Also, I assume you are looking at the Security tab on the properties of
> the
> > files and not at the Share permissions on the folder.  Share permissions
> > only apply when the files are accessed through the network share and do
> not
> > apply when accessing the files locally.
> >
> > It does sound like the permissions are not set up correctly.  You could
> > either reexamine and/or post the permissions on one sample file, or you
> > could enable auditing for successful file access to that folder for the
> > Everyone group
> >
> > Be careful when using Deny.  If you Deny the Everyone group, then
Everyone
> > is denied, including Administrators.  [Though administrators can always
> take
> > ownership of the files to fix the problem.]
> >
> >
>
>


Relevant Pages

  • Re: XP permission constraint with win2000 permission
    ... file ownership and permissions supersede administrator rights. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Problem copying file from one system to another
    ... ownership and permissions supersede administrator rights. ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)
  • Re: User Account Suddenly Unaccessable
    ... Revert to the original profile folder. ... Log on as administrator ... The Sharing tab has "Do not share this folder" checked, and the rest of the tab has no data. ... In the middle section none of the "permissions" categories have any checkmarks - no marks in allow, ...
    (microsoft.public.win2000.general)
  • Re: Do not have accessibility to change certain file names
    ... ownership and permissions supersede administrator rights. ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ...
    (microsoft.public.windowsxp.accessibility)
  • Re: User Account Suddenly Unaccessable
    ... Revert to the original profile folder. ... Log on as administrator ... The Sharing tab has "Do not share this folder" checked, and the rest of the tab has no data. ... In the middle section none of the "permissions" categories have any checkmarks - no marks in allow, ...
    (microsoft.public.win2000.general)